CriticalPHP2Shell: is your PHP patched?

openai@7.43.0

Wait — 7.39.0 is the safer choice for now.

Published 13 h ago; most regressions surface within 72 h.

Why this verdict

  • Published 13 h ago; most regressions surface within 72 h.Evidence
  • Release notes list 2 breaking changes: Decisions request inputs now accept new message roles and tool‑history items, which can break code that assumes a fixed…Evidence

Confidence 100% · algorithm v1 · computed 2026-10-23. How verdicts work

Supply chain and security

Malware reports
None known (OSV)
Known advisories
None known (OSV)
License
Apache-2.0
Install scripts
None
Build provenance
Signed provenance
Weekly downloads
0

Compatibility

No compatibility boundary is crossed: this is a patch or minor release on a stable major.

Breaking changes in the release notes

  • Decisions request inputs now accept new message roles and tool‑history items, which can break code that assumes a fixed set of input types.“Decisions request inputs also accept new message roles and tool-history items, so update code that assumes it knows every input type.”
  • `DecisionInputMessage` is now a union, requiring code that extends the old interface to use `DecisionInputMessage.DecisionInputUserMessage`.“`DecisionInputMessage` is now a union: code that extends or implements the old interface must use `DecisionInputMessage.DecisionInputUserMessage` instead.”

AI-extracted from the official release notes and checked against the quoted text. Read the source

0 issues mention this version in openai/openai-node so far (14-day window still open). See them on GitHub

Check the official release notes below for behaviour changes before merging.

Release notes

Read the OpenAI changelog on Changes.Watch or the package page on npm for this version’s features and fixes.

New in this release

  • Live response Decisions question `instructions` can now be a string or an array of text, image, or JSON parts.“A Live response's Decisions question `instructions` can now be a string or an array of text, image, or JSON parts.”
  • Decisions request inputs now accept new message roles and tool‑history items.“Decisions request inputs also accept new message roles and tool-history items, so update code that assumes it knows every input type.”
  • `DecisionInputMessage` is now a union type.“`DecisionInputMessage` is now a union: code that extends or implements the old interface must use `DecisionInputMessage.DecisionInputUserMessage` instead.”

AI-extracted from the official release notes and checked against the quoted text. Read the source

Deprecations and deadlines

The maintainer has not deprecated this version on npm.

Did upgrading to 7.43.0 work for you?

Results appear once three developers have voted.

More openai verdicts